topic Re: VPN in Operating System - Linux

VPN

Fadia Almarei — Sun, 12 Aug 2007 05:34:24 GMT

Dear All

I have VPN error wih TCP configuragtion ,

Initializing the VPN connection.
Initiating TCP to 212.35.66.36, port 5020
Secure VPN Connection terminated locally by the Client
Reason: Failed to establish a TCP connection.
There are no new notification messages at this time.”

any ideas please

Re: VPN

Steven E. Protter — Sun, 12 Aug 2007 07:31:53 GMT

Shalom,

It would be helpful to know your Linux distribution, what client you are using and what configuration steps you have taken thus far.

SEP

Re: VPN

Fadia Almarei — Sun, 12 Aug 2007 07:38:41 GMT

it is RHEL4 , VPN cisco 4.6 ,

Re: VPN

skt_skt — Sun, 12 Aug 2007 15:35:26 GMT

Looks like the port requirement at the client side itself is not working as desired.

is there a specific port requierment at client side?check with "netstat -ntlp"

Re: VPN

markmcjr — Mon, 13 Aug 2007 05:13:39 GMT

I agree, more information about the VPN client you are using would be helpful.

Here are some things to think about:

-Some home bases routers (linksys,netgear, etc) or firewalls need to be need to be configured to route IPSEC correctly (assuming thats the protocol your VPN is using)

-If you have a Firewall on the Linux workstation, I would also check that as well.

-Check your logs (/var/log/messages, etc)

Let us know a little more about your setup so that we maybe able to assist more.

Regards
Mark
www.mytruetech.com

Re: VPN

Matti_Kurkela — Mon, 13 Aug 2007 07:58:43 GMT

First, has the cisco_ipsec kernel module been installed properly?
Run "lsmod |grep cisco_ipsec" to see. If it displays nothing at all, the module is not installed.

Note that you'll need to recompile the cisco_ipsec module each time you install a kernel update. To recompile the module, you must have the "kernel-devel" package that matches your kernel version and flavor installed on your system. (I.e. if you use smp or hugemem kernel, you must use the appropriate version of "kernel-smp-devel" or "kernel-hugemem-devel" package instead.)

There is a free alternative for Cisco VPN client:
http://www.unix-ag.uni-kl.de/~massar/vpnc/

It does not require any kernel modules like the Cisco product does. However, it does not have all the features the Cisco product has.

MK